| Nowadays, the most extensively appliedcomputer authentication approach is realized through textual username and textual password. However, the drawback of textual password is obvious: First, user tends to choose simple, short, or easy-to-remember password, such as name of family members or birth date, which are, however, vulnerable. Secondly, strong security level password is difficult to memorize. Besides, non-English speaking users prefers to set password mostly contains numbers. The preference will increase the success for dictionary attack.Many research suggests graphical password is easier for user to memorize than textual password. Therefore, graphical password is introduced as a replacement for textual password. In this research work, we will classify existing graphical password mechanism, and briefly analyze their availability, security and other features.And this research work proposes a new kind graphical password mechanismCCGP(Chinese Characters Graphical Passwords). CCGP is a mechanism based on memory and redrawing which targets to mobile terminal with touch screen. At the registration stage, user needs to create their passwords in the area contains 3×3 dots, through area selection stages and strokes drawing stages they create Chinese Characters Graphical Passwords or their original ones. Graphical password based on Chinese characters helps improving user’s memory strength. Also inspired by the structure of Chinese characters, CCGP allows user select one area according to the expect character structure, then draw strokes on this area. And after that, select other areas and draw other strokes continually till completion. This separated drawing increases the difficulty of hacking.Inaddition, considering the compatibility for traditional textual password authentication system, we propose and realize an algorithm that maps the graphical password to textual passwords. Thus the user can choose the textual password that generated by graphical password authentication system.Besides, the application design and implementation method of CCGP are also introduced in this research. We also analyze the availability and security of CCGP mechanism through quantitative analysis and user investigation. |